🛡️🔥 Cybersecurity Terms Every Beginner Should Know — Part 5

• Threat Hunting 🔎 — Proactively searching for signs of threats that may have bypassed existing security controls.

• Detection Rule 🚨 — A rule that identifies specific patterns or behaviors that may indicate suspicious activity.

• False Positive ❌ — A legitimate activity incorrectly flagged as suspicious.

• False Negative ⚠️ — Malicious activity that a security system fails to detect.

• Alert 🔔 — A notification generated when a security tool detects potentially suspicious activity.

• Log 📋 — A record of events generated by systems, applications, devices, or security tools.

• Log Analysis 🔍 — Examining logs to identify errors, unusual behavior, or potential security incidents.

• Threat Intelligence Feed 🧠 — A source of information about known threats, indicators, vulnerabilities, or attacker activity.

• IOC 🎯 — An Indicator of Compromise that may provide evidence of malicious activity.

• IOA 👀 — An Indicator of Attack that focuses on suspicious behavior or activity associated with an attack.

• Attack Chain ⛓️ — The sequence of actions an attacker may take during a cyberattack.

• Initial Access 🚪 — The stage where an attacker first gains access to a target environment.

• Persistence 🔄 — Techniques used by an attacker to maintain access to a compromised system.

• Command & Control (C2) 📡 — Communication between a compromised system and an attacker's infrastructure.

• Containment 🛑 — Actions taken to limit the spread or impact of a security incident.

• Eradication 🧹 — Removing the cause of a security incident, such as malware or compromised accounts.

• Recovery 🔄 — Restoring affected systems and services to normal operation.

• Security Playbook 📖 — A documented set of steps for responding to a specific type of security alert or incident.

• Threat Model 🗺️ — A structured analysis of potential threats, attack paths, and security controls for a system.

• Attack Surface Reduction 🛡️ — Reducing unnecessary entry points and exposure that attackers could potentially exploit.

💡 Double Tap ❤️ For More